It would appear that two different web infections are moving around the Internet. One is about 15% of ScanSafe's traffic, the other only 1%. The 15% represents e-commerce websites hosting the infections and passing them on to visitors.

The 1% traffic is significantly more interesting as it appears to be intelligent enough to produce a randomly generated file name each time the person visits the site. It is this fluxing which is causing so much discomfort with Incident Handlers worldwide.

If you have any info regarding these mass infections. Please let us know here.